Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137362e302f32312d3231203d3e20323731343636.roa
File: 3230312e34392e3137362e302f32312d3231203d3e20323731343636.roa (raw, json)
Hash identifier: xbYrsIOwMUgTYqD3qc2xmIJ5NmkVe0zus1MNTSQvBSE=
Subject key identifier: 85:69:F7:02:F4:47:5A:E0:E4:BE:F5:BB:AC:DB:99:14:01:91:42:50
Certificate issuer: /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial: 45C5FC18D60F26A22265B0A65F34A0363A4D7ABF
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137362e302f32312d3231203d3e20323731343636.roa
Signing time: Thu 04 Apr 2024 14:22:10 +0000
ROA not before: Thu 04 Apr 2024 14:17:10 +0000
ROA not after: Thu 03 Apr 2025 14:22:10 +0000
asID: 271466
IP address blocks: 201.49.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c5:fc:18:d6:0f:26:a2:22:65:b0:a6:5f:34:a0:36:3a:4d:7a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Validity
Not Before: Apr 4 14:17:10 2024 GMT
Not After : Apr 3 14:22:10 2025 GMT
Subject: CN=8569F702F4475AE0E4BEF5BBACDB991401914250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:e5:ad:60:ff:67:63:6a:80:01:0c:af:00:
be:d0:27:bf:50:c5:5f:04:0f:a4:a8:58:19:47:de:
4f:b0:6c:0a:84:d8:09:e8:55:ca:a3:9f:8c:e8:80:
2b:b2:b2:60:d8:44:24:c3:be:52:1f:2c:50:59:3c:
f2:81:08:6e:a2:cb:f5:45:61:63:47:39:42:39:4c:
bc:7c:1e:e2:98:c7:c3:b9:f5:03:58:8b:51:b7:66:
33:e5:ba:f1:54:4b:c6:f2:20:b6:83:63:e8:18:4c:
0c:32:c4:f6:5d:54:4f:d2:93:6f:f6:36:8e:0d:f6:
8e:71:56:70:a6:0a:28:80:82:32:85:3d:14:c3:b0:
c4:8c:4f:dc:56:31:54:53:70:a3:11:7a:54:31:38:
86:4b:0c:d5:da:e2:ad:f5:6e:65:a6:32:4c:16:45:
4e:de:2d:cc:4c:3b:3e:86:7f:ec:7d:31:c6:6a:31:
fa:46:7f:5d:54:cc:39:16:ef:ea:cd:3f:73:04:d1:
48:7a:fc:ce:35:32:f5:0e:f5:cf:dd:c9:c3:2a:d2:
34:dc:77:77:2b:57:09:2e:2d:9b:43:38:15:bc:5f:
65:1c:7c:31:f4:5f:0d:4b:ea:a3:35:12:2e:3c:ea:
70:7f:6f:af:2d:39:ac:f9:94:39:98:de:ef:b2:23:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:69:F7:02:F4:47:5A:E0:E4:BE:F5:BB:AC:DB:99:14:01:91:42:50
X509v3 Authority Key Identifier:
keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137362e302f32312d3231203d3e20323731343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.176.0/21
Signature Algorithm: sha256WithRSAEncryption
14:09:56:54:a6:16:8f:c5:ad:cc:b6:bd:80:5f:6e:fd:90:12:
50:8e:4e:15:f4:d6:48:d2:7f:4d:7c:f2:e8:05:5a:18:ee:bc:
ac:3f:26:d7:20:ca:9b:4e:fb:f1:d8:10:62:35:bc:01:94:80:
bc:4d:25:29:73:e1:f9:2b:00:55:4c:be:22:ff:df:c1:ba:3a:
e1:6d:d5:0a:53:71:2d:e9:79:f3:98:78:a5:84:06:5a:91:40:
8a:b3:d8:8b:36:43:8b:78:ae:6b:a4:5e:7a:aa:3c:c0:cf:47:
28:d8:43:a0:d2:06:70:92:d3:0b:db:f5:5f:b8:3b:fa:4c:f0:
85:46:03:2d:5d:ac:e9:a2:28:b6:95:6c:be:16:48:8a:f6:f6:
89:14:8f:39:f9:01:de:b0:f9:de:f5:21:1a:5b:53:72:5f:8f:
06:a7:0a:33:ed:9d:e0:0a:25:b1:23:75:5a:dc:ef:17:92:ae:
c7:a9:a5:0f:58:a5:8e:7d:1c:4e:a0:6b:3c:89:44:c5:c3:27:
48:c3:35:a2:5b:e9:c6:c9:af:96:30:b8:cb:0e:be:10:38:db:
5a:32:31:83:bb:44:be:0d:f9:f6:0d:8f:19:be:be:94:29:36:
99:b0:d0:25:67:23:d2:26:00:b7:03:07:a5:a9:fd:4c:72:db:
a7:cd:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:41:24 2025 by rpki-client